Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Negotiation Chat — Dragonforce

Return to Dragonforce
Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: c2f8b989-3ca8-46b6-856b-298fb4bc8771

Initial Ransom
$7,000,000
Negotiated Ransom
N/A
Ransom Paid
N/A
Hello. You've been attacked by DragonForce as you can see. We've researched information about your company and decided to set a price of $7,000,000. Otherwise your data will be published in our blog.
2024-11-20T02:18:01.897517Z
Gang
Victim
Can you provide the list of files you have taken? Also what type of discounts do you offer?
2024-11-20T16:46:45.392949Z
[attachment: list.zip (2780416 bytes)]
2024-11-20T20:29:17.989461Z
Gang
If you pay quickly, we can provide a 10% discount.
2024-11-20T20:31:20.346305Z
Gang
We need an update ASAP.
2024-11-25T15:19:12.786536Z
Gang
Victim
Hello sorry for the delay in responding it was Thanksgiving holiday last week so a lot of people were out. Can you provide the 3 files to prove you have them. These files: Old SPF Records.txt, 01 19 23 KNP POSTING SHEET.xlsm and Zelis Payment URL.txt
2024-12-04T19:12:19.047574Z
Sure.
2024-12-04T19:41:47.453304Z
Gang
[attachment: ashvilleeyes_test.zip (58126 bytes)]
2024-12-04T19:42:04.731879Z
Gang
Victim
Thanks we will review and be back in touch
2024-12-05T14:05:43.812681Z
Keep in mind that your decryptor will be automatically deleted in 3 days. We won't extend timer if we not come to an agreement for these 3 days. Hurry up please.
2024-12-05T18:18:47.365378Z
Gang